CVE-2023-41786

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 23, 2023
Updated: Nov 30, 2023
CWE ID 200
CWE ID 668

Summary

CVE-2023-41786 is a vulnerability affecting Pandora FMS versions 700 to 772. It enables unauthorized users with low privileges to download sensitive database backups, exposing the information to potential threats. This issue constitutes a File Discovery vulnerability, allowing unauthorized access to data that could include confidential business information or user credentials. This vulnerability poses a significant risk to the security and privacy of organizations using Pandora FMS, emphasizing the importance of promptly applying the available patch to mitigate the exposure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share